Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Adchoice Malware


  • This topic is locked This topic is locked
6 replies to this topic

#1 Terwyl

Terwyl

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:32 PM

Posted 19 August 2014 - 08:25 AM

Has anyone had this malware, and do you know how to remove it. There are various adverts that appear at the most inconvenient times on the screen and whilst you can sometimes remove, they just appear again.

 

I have tried to track down in my files but I suspect they are hidden.

 

Thanks

 

 

Terry Wyld


Edited by hamluis, 19 August 2014 - 09:47 AM.
Moved from MRL to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,305 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:32 PM

Posted 19 August 2014 - 10:08 AM

Check your browser(s) for add-ons/ extensions/ plugins you did not install and disable or remove.

 

download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
You will be prompted to restart your computer. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

 

  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message

 

  • Run the ESET Online Scanner.
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.

Use CCleaner to cleanup temporary files, logs, ad cookies, etc. Use the default settings. No need to use the Registry Cleaning Tool and its

use may cause other problems. Pay close attention while installing and UNcheck the offers of toolbars such as Yahoo.

CCleaner - PC Optimization and Cleaning - Free Download


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 Terwyl

Terwyl
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:32 PM

Posted 20 August 2014 - 03:19 AM

Thanks to Buddy215 for responding.

 

I have followed all of the processes suggested and have logs ready. I have also established that this is Google Adchoices sometimes attached to Babylon Toolbar. 

 

Anyway after all processes it is still on my laptop. I cannot see anywhere here to add attachments, so I am inserting into this message.

 

 

 

Thanks

 

 

Terry

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Terry on 19/08/2014 at 17:45:50.89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

~~~ Services

 

~~~ Registry Values

 

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sparktrust
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3116106764-2768196040-1957312253-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3116106764-2768196040-1957312253-1000\Software\web assistant
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sparktrust
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444394406}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444394406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444394406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444394406}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{184D0215-DE87-ED14-D156-0DB82403EE94}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{37A5D468-DC5B-4EA7-9F08-C654CE126FF5}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{37A5D468-DC5B-4EA7-9F08-C654CE126FF5}
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"

 

~~~ Files

Successfully deleted: [File] "C:\Program Files (x86)\mozilla firefox\plugins\npcouponprinter.dll"
Successfully deleted: [File] "C:\Program Files (x86)\mozilla firefox\plugins\npmozcouponprinter.dll"
Successfully deleted: [File] C:\windows\syswow64\sho1690.tmp
Successfully deleted: [File] C:\windows\syswow64\sho1CE2.tmp
Successfully deleted: [File] C:\windows\syswow64\sho208E.tmp
Successfully deleted: [File] C:\windows\syswow64\sho3FFF.tmp
Successfully deleted: [File] C:\windows\syswow64\sho4E6A.tmp
Successfully deleted: [File] C:\windows\syswow64\sho4F38.tmp
Successfully deleted: [File] C:\windows\syswow64\sho53DF.tmp
Successfully deleted: [File] C:\windows\syswow64\sho54D5.tmp
Successfully deleted: [File] C:\windows\syswow64\sho554E.tmp
Successfully deleted: [File] C:\windows\syswow64\sho5E29.tmp
Successfully deleted: [File] C:\windows\syswow64\sho6AB5.tmp
Successfully deleted: [File] C:\windows\syswow64\shoA15E.tmp
Successfully deleted: [File] C:\windows\syswow64\shoB2F8.tmp
Successfully deleted: [File] C:\windows\syswow64\shoC0E7.tmp
Successfully deleted: [File] C:\windows\syswow64\shoCD30.tmp

 

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\optimizerpro"
Successfully deleted: [Folder] "C:\ProgramData\sparktrust"
Successfully deleted: [Folder] "C:\Users\Terry\AppData\Roaming\sparktrust"
Successfully deleted: [Folder] "C:\Program Files (x86)\sparktrust"
Successfully deleted: [Folder] "C:\Users\Terry\AppData\Roaming\microsoft\windows\start menu\programs\sparktrust"
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{007E65DD-A030-402A-B46A-9796CED3A0A8}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{01F76E0C-9D65-486D-BEE5-84EE525CDDF5}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{0E72AC4A-E91C-4D3A-AE14-61825F8C24C8}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{1186E8AC-99FF-415C-90BD-4B02F96CDB56}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{1215CC82-16AA-445D-B547-972E63F6A489}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{1A6227DC-A9F5-4285-B12F-D6B469A88E04}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{1E9D25B4-5765-4325-80AC-E8EDEC28449F}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{2568C0CF-251D-48D0-81AF-C08E01A7EA19}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{2E9DD06D-9ECC-48CF-BBD4-254642379405}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{32397141-BEED-4FB9-BA83-4565E4D83B2A}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{343673C2-C15B-433E-A93E-69F910F3E914}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{41252972-866A-4117-9202-CF3D40F4A1FE}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{42347AB1-7177-43BF-9A33-2E1FD322890B}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{440EDDAC-2CA9-4838-8E0C-F027B0F4A8FD}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{498B28A6-CA93-4B9F-AFAA-E3EA60A754DC}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{4C99C061-2C72-4592-BCEA-4052C2027463}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{4FBEFFDF-48DC-4E54-9E6D-D1BB3C97947A}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{51A7145A-76AB-4C9A-86B4-7718B9E214F2}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{54767AC2-8F59-4482-995C-19818C6679E9}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{57E3A43A-31FA-44B5-BCEC-9E84BAE6FCB8}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{5B870548-D5D0-4F26-94F2-C19808281DEA}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{6535229C-F802-4D67-BBAB-0C5176CD095E}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{6A39405E-2A4A-40CF-810B-750701EC28FB}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{73B45DCB-51E3-455D-97A4-BD75CF7048D6}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{73FD9A63-4C49-4B1F-AEC3-1F1A6F8EC60A}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{8226B7FF-006A-4B73-B940-21FF5C4645BD}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{83BA5FB7-6197-4AA8-B996-59DB959D418A}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{84F5CEAD-3B88-4B68-A5D8-46D7FE8B4462}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{86223BE2-96F4-4B0B-B57A-51F92529A576}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{8C769A62-6AF2-4724-A3ED-15E9323CB9D6}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{91A38519-2E11-46E2-84E4-07C2CAC0095A}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{9AC72D44-DC5E-4176-962A-B38212835A43}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{9BD5CA4E-6168-4BB6-8A69-3C9843AF484B}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{A345F54B-508F-4A70-8540-C5A45CD3E6F1}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{A9D70A93-81BF-49B9-9A39-7E6C9CE4E645}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{ADD82B8A-5340-4353-BBD3-9AAFF350A72B}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{B88975A2-FF9A-41C1-B05D-26F4C067C560}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{BE5355BB-F183-42B2-98E1-D2FE2FDB2DED}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{C032412C-C772-4FE8-AAB7-96EE2B9FBC29}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{C2818F3D-19FC-449D-BE8C-5B24F94C76C7}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{C51DE455-9FA8-4EA4-88D9-2C96FB55334E}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{C7443A24-B24A-413D-AEB0-419247AD61A2}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{CE30C2A2-61D9-499B-85F3-A4B92F05D6FF}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{CEC78044-FF5B-4BB9-941F-EA5705F00D69}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D04CFC11-A4F3-42DC-9F01-EF51FB587BE7}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D2B392AF-C1A6-40E3-B542-122B291E6928}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D30CA467-4C34-4BD7-9FEA-A5E8FB25EF1E}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D33F5BC0-35B8-4302-A2FF-51BAF00BAF2B}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D4255E57-0A49-4AE0-8D1F-DBA49A1F4FAB}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D51CA4B7-8475-486E-9097-0B734A9BB8BC}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D67A8D47-F724-498B-A366-34B0253A50B3}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{D7858E8A-DC90-4A13-83A1-2EF0A907023B}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{DB7F1E0D-16A7-4D91-813C-C2B66A00B6D6}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{DBA74424-A56F-4DEC-ABA3-6102641D1AAE}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{DC70375F-40E7-42E5-BEF5-1DF92F3CC1D2}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{E04D2F32-B7F0-4A48-AE02-A73D72A11ABD}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{E0DAF0B3-01B7-4690-BA0D-E4971C0FC17D}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{E1106324-D30B-4248-B4EE-E9BF930D4122}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{E1BF7590-55E5-4CD4-A0C7-8E28B6623B99}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{E36BAEBD-4F3B-4BA4-B034-7FBD1B3557FC}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{E479F483-BF79-4E64-B462-5130DFF8D256}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{E5AEE219-785A-4E3A-A5D6-E5749E78E592}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{ED1C7106-40B4-49BE-A14E-E22CB130E609}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{EEC06949-C6E1-44E1-97E7-AF8BB386CBEE}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{F68364E5-9771-4761-AB24-64C7D5A83AE0}
Successfully deleted: [Empty Folder] C:\Users\Terry\appdata\local\{FD0BE69A-C000-4337-9B11-5AFF7468E434}

 

~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted the following from C:\Users\Terry\AppData\Roaming\mozilla\firefox\profiles\2ptxnp8z.default-1387217905632\prefs.js

user_pref("extensions.7OtJ.url", "hxxp://techwebbjobnew.info/sync2/?q=hfZ9ofV9CShEAen0pjs9tMqLDe49CNU0m9sMCMlNhd9Fqda9rdnGrja6rHnMBzqUojw9rdnEqTw4rTUErch7hfs0pihPBMn0pdw9rjCEq
Emptied folder: C:\Users\Terry\AppData\Roaming\mozilla\firefox\profiles\2ptxnp8z.default-1387217905632\minidumps [30 files]

 

~~~ Event Viewer Logs were cleared

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19/08/2014 at 18:05:58.67
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.307 - Report created 19/08/2014 at 17:23:46
# Updated 17/08/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Terry - TERRY-LAPTOP
# Running from : C:\Users\Terry\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : 1a34a8e0
[#] Service Deleted : BackupStack
Service Deleted : vToolbarUpdater18.0.5
[#] Service Deleted : Web Assistant Updater

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\4d09ce8d5400296d
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\ProgramData\DSearchLink
Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\ProgramData\Premium
Folder Deleted : C:\ProgramData\SNT
Folder Deleted : C:\ProgramData\wincert
Folder Deleted : C:\ProgramData\Bcool
Folder Deleted : C:\ProgramData\saFeweb
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\24x7 help
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ParetoLogic
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkypEmoticons
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Registry Optimizer
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bcool
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\File Type Assistant
Folder Deleted : C:\Program Files (x86)\jZip
Folder Deleted : C:\Program Files (x86)\Lightspark 0.5.3-git
Folder Deleted : C:\Program Files (x86)\NCH Software
Folder Deleted : C:\Program Files (x86)\v-Grabber
Folder Deleted : C:\Program Files (x86)\WebConnect
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\Common Files\ParetoLogic
Folder Deleted : C:\windows\Installer\{6DDE8071-E4BA-461B-8A96-990DFAA0EBD1}
Folder Deleted : C:\windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Folder Deleted : C:\windows\SysWOW64\ARFC
Folder Deleted : C:\windows\SysWOW64\jmdp
Folder Deleted : C:\windows\SysWOW64\WNLT
Folder Deleted : C:\Program Files\~Web Assistant
Folder Deleted : C:\windows\System32\ARFC
Folder Deleted : C:\windows\System32\ljkb
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\torch
Folder Deleted : C:\Users\Terry\AppData\Local\apn
Folder Deleted : C:\Users\Terry\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Terry\AppData\Local\Conduit
Folder Deleted : C:\Users\Terry\AppData\Local\genienext
Folder Deleted : C:\Users\Terry\AppData\Local\jZip
Folder Deleted : C:\Users\Terry\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Terry\AppData\Local\torch
Folder Deleted : C:\Users\Terry\AppData\Local\Temp\jZip
Folder Deleted : C:\Users\Terry\AppData\LocalLow\AppGraffiti
Folder Deleted : C:\Users\Terry\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Terry\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Terry\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Terry\AppData\LocalLow\Delta
Folder Deleted : C:\Users\Terry\AppData\LocalLow\RebateInformer
Folder Deleted : C:\Users\Terry\AppData\LocalLow\SimplyTech
Folder Deleted : C:\Users\Terry\AppData\LocalLow\SiteRanker
Folder Deleted : C:\Users\Terry\AppData\LocalLow\Smartbar
Folder Deleted : C:\Users\Terry\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\Terry\AppData\LocalLow\Bcool
Folder Deleted : C:\Users\Terry\AppData\Roaming\24x7 help
Folder Deleted : C:\Users\Terry\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\Terry\AppData\Roaming\eCyber
Folder Deleted : C:\Users\Terry\AppData\Roaming\FinalTorrent
Folder Deleted : C:\Users\Terry\AppData\Roaming\iSafe
Folder Deleted : C:\Users\Terry\AppData\Roaming\Nosibay
Folder Deleted : C:\Users\Terry\AppData\Roaming\ParetoLogic
Folder Deleted : C:\Users\Terry\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\Terry\AppData\Roaming\SimplyTech
Folder Deleted : C:\Users\Terry\AppData\Roaming\SkypEmoticons
Folder Deleted : C:\Users\Terry\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Terry\AppData\Roaming\Uniblue
Folder Deleted : C:\Users\Terry\AppData\Roaming\VOPackage
Folder Deleted : C:\Users\Terry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
Folder Deleted : C:\Users\Terry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Folder Deleted : C:\Users\Terry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Folder Deleted : C:\Users\Terry\Documents\Mobogenie
Folder Deleted : C:\Users\Terry\Documents\Optimizer Pro
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\Smartbar
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\CT3309350
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\Extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\mvq8heeg.default-1382205540749\Extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_153507\Extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\Extensions\staged\ffxtlbr@mysearchdial.com
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\mvq8heeg.default-1382205540749\Extensions\staged\ffxtlbr@mysearchdial.com
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_153507\Extensions\staged\ffxtlbr@mysearchdial.com
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\Extensions\toolbar@ask.com
Folder Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\Extensions\{650598e1-b35a-45d3-b607-896d7acb64c3}
Folder Deleted : C:\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Folder Deleted : C:\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcfopijhanoceijcfpaileppfklbeggk
Folder Deleted : C:\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl
[!] Folder Deleted : C:\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcfopijhanoceijcfpaileppfklbeggk
File Deleted : C:\Users\Terry\AppData\Local\CRE\iigplimlmgilpobjilfbfeilnpiigpgl.crx
File Deleted : C:\END
File Deleted : C:\windows\SysWOW64\RegistryHelperLM.ocx
File Deleted : C:\windows\System32\dmwu.exe
File Deleted : C:\windows\System32\ImhxxpComm.dll
File Deleted : C:\windows\System32\log\iSafeKrnlCall.log
File Deleted : C:\Users\Terry\daemonprocess.txt
File Deleted : C:\Users\Terry\AppData\Local\AnyProtectScannerSetup.exe
File Deleted : C:\Users\Terry\AppData\LocalLow\SkwConfig.bin
File Deleted : C:\Users\Terry\AppData\Roaming\aps.uninstall.scan.results
File Deleted : C:\Users\Terry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\jZip.lnk
File Deleted : C:\Users\Terry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\speedupmypc.lnk
File Deleted : C:\Users\Terry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jZip.lnk
File Deleted : C:\Users\Terry\Desktop\jZip.lnk
File Deleted : C:\Users\Terry\Desktop\SpeedAnalysis.lnk
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\bProtector_extensions.rdf
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\invalidprefs.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\nsprotector.js
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\searchplugins\Ask.xml
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\searchplugins\Ask.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\Ask.xml
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\user.js
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\user.js
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\mvq8heeg.default-1382205540749\user.js
File Deleted : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_153507\user.js

***** [ Scheduled Tasks ] *****

Task Deleted : APSnotifierPP1
Task Deleted : APSnotifierPP2
Task Deleted : APSnotifierPP3
Task Deleted : Dealply
Task Deleted : DealPlyUpdate
Task Deleted : FinalTorrent Update Checker
Task Deleted : LaunchApp
Task Deleted : paretologic registration3
Task Deleted : paretologic update version3
Task Deleted : PC Performer
Task Deleted : Scheduled Update for Ask Toolbar
Task Deleted : SpeedUpMyPC Maintenance
Task Deleted : SpeedUpMyPC Startup

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Key Deleted : HKCU\Software\Google\Chrome\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl
Key Deleted : HKCU\Software\Classes\iLivid.torrent
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [iLivid]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [se]
Key Deleted : HKLM\SOFTWARE\Classes\*\shell\filescout
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB.1
Key Deleted : HKLM\SOFTWARE\Classes\AlxTB2.ToolBarProxy
Key Deleted : HKLM\SOFTWARE\Classes\AlxTB2.ToolBarProxy.1
Key Deleted : HKLM\SOFTWARE\Classes\AppGraffiti.AppGraffitiJS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\HomeTab.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
Key Deleted : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Key Deleted : HKLM\SOFTWARE\Classes\CShared.TB4Client
Key Deleted : HKLM\SOFTWARE\Classes\CShared.TB4Script
Key Deleted : HKLM\SOFTWARE\Classes\CShared.TB4Server2
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\I
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Key Deleted : HKLM\SOFTWARE\Classes\iLivid.torrent
Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\jZip.file
Key Deleted : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore
Key Deleted : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\rebinfo
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\RebateInf.RebateInfObj
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Classes\wtb.NotificationSource
Key Deleted : HKLM\SOFTWARE\Classes\wtb.NotificationSource.1
Key Deleted : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl
Key Deleted : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1
Key Deleted : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo
Key Deleted : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\robotaskbaricon_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\robotaskbaricon_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateglindorus_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateglindorus_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateWebConnect_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateWebConnect_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\utilglindorus_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\utilglindorus_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppPath\jZip.exe
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKCU\Software\5c55da8cbc3ab845
Key Deleted : HKLM\SOFTWARE\5c55da8cbc3ab845
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Classes\TBSB02638.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\TBSB02638.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\TBSB02638.TBSB02638
Key Deleted : HKLM\SOFTWARE\Classes\TBSB02638.TBSB02638.3
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3309350
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02638
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02638.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1F02FB61-2BE5-4C16-8199-AEAA16EB0342}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4EF645BD-65B0-4F98-AD56-D0437B7045F6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54ECA872-DB2A-4C6B-BBB2-F3777C6786CC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69A72A8A-84ED-4A75-8CE7-263DBEF3E5D3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E74373-58AB-47EB-B0F0-A1D82BB8EB5C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{87BEF026-9269-413C-A5B3-11F35451380E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B3EAD50C-ECB0-459A-9EDA-F505AB99675B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DB35C569-5624-4CFC-8043-E5139F55A073}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432244}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422246}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A1BBE49-C6F1-40EA-9D2F-262F0AF6DDE3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2022154E-7E3E-4809-871E-1B45A6FC7058}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{292ECB89-350E-45D2-816F-52C15305B144}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{36CC2180-B6BF-4951-9578-6B0C40044AAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44A36944-22C6-4A08-BC7C-161F3E540DBF}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{51F04BD6-3888-4849-864C-617FAE709CE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{604EA016-1EDE-41E6-A23E-76CF8F2A4808}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6247DD2C-8CF9-4041-A235-93691D71B8B4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{835BED79-DF7E-4096-B355-ED43FA2EA87B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C953EC4-8CFA-44FB-B32E-1249E5505091}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8E863BD6-50DE-47D0-A6F1-3C1F6DB72451}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9DD36F1E-5111-41C5-ADED-A2A11A2FF3E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A2FB8217-E320-434E-BA79-513E357AD54F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9CEBBF4-9129-479A-9231-E833ED3D3A8F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AFD4D1F9-167C-4884-95AE-B5A9797B0D16}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B3BA5582-79A9-464D-A7FA-711C5888C6E9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B3EAD50C-ECB0-459A-9EDA-F505AB99675B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C47788B1-9604-4D7A-A684-F4D450F2D7D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA3B41D0-D4C1-4808-B248-75DA27238828}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D4A2FF6C-087F-4D40-8DFE-92AAD484BFB8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D88B9D5C-A9CF-4C69-906D-1CCA5D85A2EF}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E4E394E0-D331-431F-B76D-E3A19193D5F6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E9BBD270-4B87-4EE2-912F-6635674986C0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F83AF01C-AA2F-469F-8BE7-D178FB15FD07}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455395506}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436644}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466396606}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CBEF8724-D080-4737-88DA-111EEC6651AA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC2BAE47-25AF-4CE9-9E78-10627A49C9EA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432244}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422246}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{01C78433-6FDF-4E5A-A82D-B535C32E03DF}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{022C9F90-2E96-47D6-A971-107650154563}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0923E315-2D8B-48CE-A37C-AE9A42F9711C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A1BBE49-C6F1-40EA-9D2F-262F0AF6DDE3}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2022154E-7E3E-4809-871E-1B45A6FC7058}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{292ECB89-350E-45D2-816F-52C15305B144}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{36CC2180-B6BF-4951-9578-6B0C40044AAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{44A36944-22C6-4A08-BC7C-161F3E540DBF}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{604EA016-1EDE-41E6-A23E-76CF8F2A4808}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6247DD2C-8CF9-4041-A235-93691D71B8B4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{835BED79-DF7E-4096-B355-ED43FA2EA87B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8E863BD6-50DE-47D0-A6F1-3C1F6DB72451}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9DD36F1E-5111-41C5-ADED-A2A11A2FF3E4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A2FB8217-E320-434E-BA79-513E357AD54F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A9CEBBF4-9129-479A-9231-E833ED3D3A8F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AFD4D1F9-167C-4884-95AE-B5A9797B0D16}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B3BA5582-79A9-464D-A7FA-711C5888C6E9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B3EAD50C-ECB0-459A-9EDA-F505AB99675B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C47788B1-9604-4D7A-A684-F4D450F2D7D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CA3B41D0-D4C1-4808-B248-75DA27238828}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D4A2FF6C-087F-4D40-8DFE-92AAD484BFB8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D88B9D5C-A9CF-4C69-906D-1CCA5D85A2EF}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E9BBD270-4B87-4EE2-912F-6635674986C0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F83AF01C-AA2F-469F-8BE7-D178FB15FD07}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455395506}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436644}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466396606}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Alexa Internet
Key Deleted : HKCU\Software\AnyProtect
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\APNDTX
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\BABSOLUTION
Key Deleted : HKCU\Software\CToolbar
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\distromatic
Key Deleted : HKCU\Software\filescout
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\InstalledThirdPartyPrograms
Key Deleted : HKCU\Software\jZip
Key Deleted : HKCU\Software\Nosibay
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\performersoft llc
Key Deleted : HKCU\Software\PerformerSoft
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\simplytech
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\SweetIM
Key Deleted : HKCU\Software\torch
Key Deleted : HKCU\Software\V9
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\simplytech
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\APN
Key Deleted : HKLM\SOFTWARE\AskToolbar
Key Deleted : HKLM\SOFTWARE\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\CToolbar
Key Deleted : HKLM\SOFTWARE\Delta
Key Deleted : HKLM\SOFTWARE\Freeze.com
Key Deleted : HKLM\SOFTWARE\InstallCore
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\jZip
Key Deleted : HKLM\SOFTWARE\Lightspark Team
Key Deleted : HKLM\SOFTWARE\ParetoLogic
Key Deleted : HKLM\SOFTWARE\PerformerSoft
Key Deleted : HKLM\SOFTWARE\systweak
Key Deleted : HKLM\SOFTWARE\torch
Key Deleted : HKLM\SOFTWARE\Uniblue
Key Deleted : HKLM\SOFTWARE\Web Assistant
Key Deleted : HKLM\SOFTWARE\WebConnect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\jZip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1B325F70-A984-421E-8407-06683E6EF03B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{20E7BC40-33F6-4A81-9D52-B58349326206}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6DDE8071-E4BA-461B-8A96-990DFAA0EBD1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lightspark
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SkypEmoticons_is1
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
Key Deleted : [x64] HKLM\SOFTWARE\Web Assistant
Key Deleted : [x64] HKLM\SOFTWARE\WNLT
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C19AC53289098045B06B0DD1D37CBAB
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23D9E9D21B4E77E41B9F50DD22F24E20
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23EEA1F105A7F45449974D9B95E7AC89
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26982796A8AFD1246B95E00265A95BF9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42D92D0D75AFEF74297E03876C8D9D33
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50FFE845C555A6E4BADB7CB7A145BFEB
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\715A3348920B6534690067594BB69F60
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7B7B13B037A7C2A42AC3E3EAF14D7107
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D05B2942E9CC80499F397F6114DFB35
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8591B8948E1C4A04F90505B3CDEE8555
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D841C5FEC311624CB88D49DB3884FA7
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD04033484A18CA4CAB3EE59D39D756E
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD746BF3B3B3FD8409B86604BA85982A
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F355F0DB7A2E3A14B8E7A568FBA25937
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17239

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [SearchAssistant]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [CustomizeSearch]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]

-\\ Mozilla Firefox v24.0 (en-GB)

[ File : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\prefs.js ]

Line Deleted : user_pref("CT3309350.1000082.isPlayDisplay", "true");user_pref("extensions.autoDisableScopes", 0);
Line Deleted : user_pref("CT3309350.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
Line Deleted : user_pref("CT3309350.1000234.TWC_TMP_city", "LONDON");
Line Deleted : user_pref("CT3309350.1000234.TWC_TMP_country", "GB");
Line Deleted : user_pref("CT3309350.1000234.TWC_country", "UNITED KINGDOM");
Line Deleted : user_pref("CT3309350.1000234.TWC_locId", "UKOL0013");
Line Deleted : user_pref("CT3309350.1000234.TWC_location", "All England Lawn Tennis and Croquet Club, United Kingdom");
Line Deleted : user_pref("CT3309350.1000234.TWC_region", "GB");
Line Deleted : user_pref("CT3309350.1000234.TWC_temp_dis", "c");
Line Deleted : user_pref("CT3309350.1000234.TWC_wind_dis", "mph");
Line Deleted : user_pref("CT3309350.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3309350.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3309350.FF19Solved", "true");
Line Deleted : user_pref("CT3309350.FirstTime", "true");
Line Deleted : user_pref("CT3309350.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3309350.UserID", "UN11064317279522284");
Line Deleted : user_pref("CT3309350.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3309350.browser.search.defaultthis.engineName", "true");
Line Deleted : user_pref("CT3309350.countryCode", "GB");
Line Deleted : user_pref("CT3309350.defaultSearch", "true");
Line Deleted : user_pref("CT3309350.embeddedsData", "[{\"appId\":\"130185669868318633\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref("CT3309350.enableAlerts", "true");
Line Deleted : user_pref("CT3309350.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3309350.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3309350.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3309350.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3309350.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3309350.fullUserID", "UN11064317279522284.IN.20130901181659");
Line Deleted : user_pref("CT3309350.installDate", "01/09/2013 18:17:07");
Line Deleted : user_pref("CT3309350.installId", "stub.exe");
Line Deleted : user_pref("CT3309350.installSessionId", "{3FB25D79-EC8B-4F85-92CB-AD15FD37EC8B}");
Line Deleted : user_pref("CT3309350.installSp", "TRUE");
Line Deleted : user_pref("CT3309350.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT3309350.installUsage", "2013-09-09T22:48:42.5369309+03:00");
Line Deleted : user_pref("CT3309350.installUsageEarly", "2013-09-09T22:48:35.8912883+03:00");
Line Deleted : user_pref("CT3309350.installerVersion", "1.6.1.2");
Line Deleted : user_pref("CT3309350.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3309350.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3309350.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3309350.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3309350.keyword", "true");
Line Deleted : user_pref("CT3309350.lastVersion", "10.19.2.5");
Line Deleted : user_pref("CT3309350.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3309350.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fdub114.mail.live.com%2Fdefault.aspx%23n%3D1496271216%26fid%3D1\",\"EB_MAIN_FRAME_TITLE\":\"Outlook%20-%20terrywyld%[...]
Line Deleted : user_pref("CT3309350.openThankYouPage", "false");
Line Deleted : user_pref("CT3309350.openUninstallPage", "true");
Line Deleted : user_pref("CT3309350.originalHomepage", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp&d=406-495&v=n8811-92&t=4");
Line Deleted : user_pref("CT3309350.originalSearchAddressUrl", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=495&systemid=406&v=n8811-92&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=1618602357534524&o=APN10645&q=");
Line Deleted : user_pref("CT3309350.originalSearchEngine", "Ask.com");
Line Deleted : user_pref("CT3309350.originalSearchEngineName", "Ask.com");
Line Deleted : user_pref("CT3309350.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3309350.search.searchAppId", "130185669868318633");
Line Deleted : user_pref("CT3309350.search.searchCount", "0");
Line Deleted : user_pref("CT3309350.searchFromAddressBarEnabledByUser", "true");
Line Deleted : user_pref("CT3309350.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT3309350.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3309350.searchRevert", "false");
Line Deleted : user_pref("CT3309350.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT3309350.searchUserMode", "2");
Line Deleted : user_pref("CT3309350.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3309350.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3309350.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");
Line Deleted : user_pref("CT3309350.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3309350\"}");
Line Deleted : user_pref("CT3309350.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://BrowserPlus2.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3309350.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"BrowserPlus2 \"}");
Line Deleted : user_pref("CT3309350.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3309350.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3309350.serviceLayer_services_Configuration_lastUpdate", "1378756113564");
Line Deleted : user_pref("CT3309350.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1378756120227");
Line Deleted : user_pref("CT3309350.serviceLayer_services_appsMetadata_lastUpdate", "1378756119897");
Line Deleted : user_pref("CT3309350.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1378756120110");
Line Deleted : user_pref("CT3309350.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1378756114436");
Line Deleted : user_pref("CT3309350.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1378756121470");
Line Deleted : user_pref("CT3309350.serviceLayer_services_login_10.19.2.5_lastUpdate", "1378756120740");
Line Deleted : user_pref("CT3309350.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1378756120038");
Line Deleted : user_pref("CT3309350.serviceLayer_services_searchAPI_lastUpdate", "1378756113643");
Line Deleted : user_pref("CT3309350.serviceLayer_services_serviceMap_lastUpdate", "1378756112764");
Line Deleted : user_pref("CT3309350.serviceLayer_services_toolbarContextMenu_lastUpdate", "1378756119922");
Line Deleted : user_pref("CT3309350.serviceLayer_services_toolbarSettings_lastUpdate", "1378756113731");
Line Deleted : user_pref("CT3309350.serviceLayer_services_translation_lastUpdate", "1378756120198");
Line Deleted : user_pref("CT3309350.settingsINI", true);
Line Deleted : user_pref("CT3309350.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3309350.showToolbarPermission", "false");
Line Deleted : user_pref("CT3309350.smartbar.CTID", "CT3309350");
Line Deleted : user_pref("CT3309350.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3309350.smartbar.homepage", "true");
Line Deleted : user_pref("CT3309350.smartbar.isHidden", true);
Line Deleted : user_pref("CT3309350.smartbar.toolbarName", "BrowserPlus2 ");
Line Deleted : user_pref("CT3309350.startPage", "true");
Line Deleted : user_pref("CT3309350.toolbarBornServerTime", "9-9-2013");
Line Deleted : user_pref("CT3309350.toolbarCurrentServerTime", "9-9-2013");
Line Deleted : user_pref("CT3309350.toolbarLoginClientTime", "Mon Sep 09 2013 20:48:40 GMT+0100 (GMT Standard Time)");
Line Deleted : user_pref("CT3309350.versionFromInstaller", "10.19.2.5");
Line Deleted : user_pref("CT3309350.xpeMode", "0");
Line Deleted : user_pref("CT3309350_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1382077360871,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3309350&octid=CT3309350&SearchSource=61&CUI=UN11064317279522284&UM=2&UP=SP4BBDC9EF-E67A-4E91-A6C7-16598259B90E");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "BrowserPlus2 Customized Web Search");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3309350&SearchSource=2&CUI=UN11064317279522284&UM=2&q=");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=495&systemid=406&v=n8811-92&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=1618602357534524&o=APN10645&q=")[...]
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3309350");
Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Line Deleted : user_pref("browser.search.defaultengine", "Web Search");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "BrowserPlus2 Customized Web Search");
Line Deleted : user_pref("browser.search.order.1", "Web Search");
Line Deleted : user_pref("extensions.asktb.abar-war-regex", "conduit\\.com");
Line Deleted : user_pref("extensions.asktb.autofill-competitor-query-enabled", true);
Line Deleted : user_pref("extensions.asktb.cbid", "U3");
Line Deleted : user_pref("extensions.asktb.config-updated", false);
Line Deleted : user_pref("extensions.asktb.crumb", "2012.10.29+02.27.29-toolbar011iad-GB-TWFuY2hlc3RlcixVbml0ZWQgS2luZ2RvbQ%3D%3D");
Line Deleted : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://uk.ask.com/web?qsrc={qsrc}&o={o}&l={l}&q={query}&dm=all&gct=bar");
Line Deleted : user_pref("extensions.asktb.displaybehavior", "");
Line Deleted : user_pref("extensions.asktb.displaytext", "");
Line Deleted : user_pref("extensions.asktb.dtid", "YYYYYYYYGB");
Line Deleted : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", false);
Line Deleted : user_pref("extensions.asktb.dyn-weather-locid-weatherWidget", "UKXX0092");
Line Deleted : user_pref("extensions.asktb.dyn-weather-tempunit-weatherWidget", "C");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://mystart.incredibar.com/mb139/?loc=IB_DS&a=6PQzYchEZ4&&i=26&search=");
Line Deleted : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxps://websearch.ask.com\", [...]
Line Deleted : user_pref("extensions.asktb.l", "dis");
Line Deleted : user_pref("extensions.asktb.last-config-req", "1351633580499");
Line Deleted : user_pref("extensions.asktb.last-v", "3.14.1.100013");
Line Deleted : user_pref("extensions.asktb.locale", "en_UK");
Line Deleted : user_pref("extensions.asktb.location", "Manchester,United Kingdom");
Line Deleted : user_pref("extensions.asktb.lstation", "");
Line Deleted : user_pref("extensions.asktb.news-native-on", true);
Line Deleted : user_pref("extensions.asktb.o", "100000027");
Line Deleted : user_pref("extensions.asktb.pstate", "");
Line Deleted : user_pref("extensions.asktb.qsrc", "2871");
Line Deleted : user_pref("extensions.asktb.search-plugin-suggestions-url", "hxxp://ss.websearch.uk.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}");
Line Deleted : user_pref("extensions.asktb.search-suggestions-enabled", true);
Line Deleted : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
Line Deleted : user_pref("extensions.asktb.socialmini-first", true);
Line Deleted : user_pref("extensions.asktb.socialmini-interval", "1200000");
Line Deleted : user_pref("extensions.asktb.socialmini-max-char-ticker", "33");
Line Deleted : user_pref("extensions.asktb.socialmini-max-items", "30");
Line Deleted : user_pref("extensions.asktb.socialmini-native-on", true);
Line Deleted : user_pref("extensions.asktb.socialmini-speed", "10000");
Line Deleted : user_pref("extensions.asktb.socialmini-transition-first-open", false);
Line Deleted : user_pref("extensions.asktb.to", "");
Line Deleted : user_pref("extensions.enabledAddons", "toolbar%40ask.com:3.15.23.100013,%7B635abd67-4fe9-1b23-4f01-e679fa7484c1%7D:2.5.9.20130409112616,%7B5a95a9e0-59dd-4314-bd84-4d18ca83a0e2%7D:1.26,rebate_informer_[...]
Line Deleted : user_pref("extensions.irmysearch.aflt", "solimmsd");
Line Deleted : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0CyEyEyCtCzytA0F0BtByEyBzzyC0DyEtN0D0Tzu0CyCyDyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1B1F1I1L1H1H1B1Q");
Line Deleted : user_pref("extensions.irmysearch.cr", "1094888022");
Line Deleted : user_pref("extensions.irmysearch.instlRef", "");
Line Deleted : user_pref("extensions.wajam.affiliate_id", "4221");
Line Deleted : user_pref("extensions.wajam.firstrun", "false");
Line Deleted : user_pref("extensions.wajam.log_send_info", "false");
Line Deleted : user_pref("extensions.wajam.mappingListJsonString", "{\"version\":\"0.21087\",\"supported_sites\":{\"google\":{\"patterns\":[\"^hxxp\\\\:\\/\\/www\\\\.google\\\\..{2,3}(|\\\\\\/ig|\\\\\\/firefox)\",\"[...]
Line Deleted : user_pref("extensions.wajam.no_trace", "false");
Line Deleted : user_pref("extensions.wajam.server_current_mapping_version", "0.21087");
Line Deleted : user_pref("extensions.wajam.supported_sites.ask.wajam_se_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.supported_sites.bing.wajam_yahoo_se_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.supported_sites.ebay_product.wajam_se_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.supported_sites.ebay_v2.wajam_se_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.supported_sites.encryptedgoogle.wajam_google_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.supported_sites.google.wajam_google_se_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.supported_sites.imdb.wajam_se_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.supported_sites.yahoo.wajam_se_js", "try {window[");
Line Deleted : user_pref("extensions.wajam.trace_log", "");
Line Deleted : user_pref("extensions.wajam.unique_id", "0D313538168241E61A503A70C50F8126");
Line Deleted : user_pref("extensions.wajam.user_current_mapping_version", "0");
Line Deleted : user_pref("extensions.wajam.version", "1.26");
Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3309350");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3309350&CUI=UN11064317279522284&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3309350&octid=CT3309350&SearchSource[...]
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3309350&SearchSource=2&CUI=UN11064317279522284&UM=2&q=");
Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3309350");
Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3309350");
Line Deleted : user_pref("smartbar.machineId", "7TPZUCFNITPF6LRJRCSTMRNHHPO+KFOJQYIWQ9NCRQDNIZRJNTEL3YY/1I/+SIF4ARTOBTPH8ZI1NJCLWYR9XG");
Line Deleted : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3309350&CUI=UN11064317279522284&UM=2&SearchSource=13");
Line Deleted : user_pref("browser.search.selectedEngine", "Mysearchdial");
Line Deleted : user_pref("browser.search.defaultenginename", "Web Search");
Line Deleted : user_pref("keyword.URL", "hxxp://mystart.incredibar.com/?a=6PQzYchEZ4&loc=skw&search=");
Line Deleted : user_pref("CT3309350.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");

[ File : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename,S", "WebSearch");
Line Deleted : user_pref("browser.search.order.1,S", "WebSearch");
Line Deleted : user_pref("browser.search.selectedEngine,S", "WebSearch");
Line Deleted : user_pref("extensions.irmysearch.aflt", "cmi_14_15_ff");
Line Deleted : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutDtByDtD0FtBtDtDtDtDtDtCzzyC0DyEtN0D0Tzu0SzztBzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StDyE0C0CzzyCtByCtG0EyE0B0Ct[...]
Line Deleted : user_pref("extensions.irmysearch.cr", "2111794816");
Line Deleted : user_pref("extensions.irmysearch.instlRef", "140305_b");

[ File : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\mvq8heeg.default-1382205540749\prefs.js ]

Line Deleted : user_pref("browser.search.selectedEngine", "Mysearchdial");user_pref("extensions.autoDisableScopes", 0);

[ File : C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_153507\prefs.js ]

Line Deleted : user_pref("browser.search.defaultengine", "Web Search");
Line Deleted : user_pref("browser.search.defaultenginename", "Web Search");
Line Deleted : user_pref("browser.search.order.1", "Web Search");
Line Deleted : user_pref("browser.search.selectedEngine", "Mysearchdial");
Line Deleted : user_pref("keyword.URL", "hxxp://mystart.incredibar.com/?a=6PQzYchEZ4&loc=skw&search=");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
Deleted [Search Provider] : hxxp://search.babylon.com/?mntrId=7c4e86d4000000000000c446193fb247&babsrc=SP_ss&affID=109868&q={searchTerms}
Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=100000027&locale=en_UK&apn_uid=C85286A8-DBB3-4797-82DF-211AE7A0047F&apn_ptnrs=U3&apn_sauid=AEAA1D16-CB0F-450D-9A83-F17C7163BAB8&apn_dtid=OSJ000YYGB&q={searchTerms}
Deleted [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&affID=121240&babsrc=SP_ss&mntrId=7C4EC446193FB247
Deleted [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=121240&babsrc=SP_ss_gin2g&mntrId=7C4EC446193FB247
Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN20440295672700716&ctid=CT3309350&UM=2
Deleted [Search Provider] : hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C4EC446193FB247&affID=123817&tsp=5015
Deleted [Search Provider] : hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=495&systemid=406&v=a9396-116&apn_uid=1618602357534524&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
Deleted [Search Provider] : hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss_Btisdt7&mntrId=7C4EC446193FB247&affID=123817&tsp=5015
Deleted [Search Provider] : hxxp://mystart.incredibar.com/?a=6PQzYchEZ4&loc=skw&search={searchTerms}
Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={37063C35-BB7C-4F9E-8CD3-F448262D04E6}&mid=65c11771b3a14290972211cc88456d25-e9e1c24ab4b69fc5ac9ea79191687a2946a2b6b2&lang=en&ds=nr013&coid=avgtbdisnr&pr=sa&d=2013-10-15 11:28:48&v=17.0.0.12&pid=avg&sg=0&sap=dsp&q={searchTerms}
Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=cmi_14_15_ff&cd=2XzuyEtN2Y1L1QzutDtByDtD0FtBtDtDtDtDtDtCzzyC0DyEtN0D0Tzu0SzztBzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StDyE0C0CzzyCtByCtG0EyE0B0CtGzztDyEyBtG0DyEzztCtGtAzyyCyByBzzyE0CtA0E0EtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0AtCzyyByDyB0BtGyDyD0D0DtGyDyDtB0AtGyByCyEzytGtByCtDyD0DyC0DtCtDyC0D0A2Q&cr=2111794816&ir=
Deleted [Search Provider] : hxxp://search.certified-toolbar.com?si=71578&st=bs&tid=8195&ver=4.8&ts=1382460931326&tguid=71578-8195-1382460931326-DCB923B98A2CB7E01CA16E11BFEF2157&q={searchTerms}
Deleted [Search Provider] : hxxp://websearch.amaizingsearches.info/?l=1&q={searchTerms}&pid=924&r=2014/04/04&hid=1136661776475716838&lg=EN&cc=GB&unqvl=51
Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3324468&octid=EB_ORIGINAL_CTID&ISID=M2FC04980-5E38-4E5F-B563-D692E487B262&SearchSource=58&CUI=&UM=5&UP=SP1601971A-7E07-499D-8E05-81DFB3FF15A3&q={searchTerms}&SSPV=
Deleted [Search Provider] : hxxp://search.incredibar.com/?q={searchTerms}&pr=&u=92543031779674338&a=6PQzYchEZ4&i=26&lang=english&cid=2&source=370&gc=gb&acr=365345
Deleted [Search Provider] : hxxp://isearch.babylon.com/?q={searchTerms}&babsrc=HP_ss_wls_btis2&s=web&as=0&ac=0
Deleted [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=NT_ss_SU&s=web&rlz=0&as=3&ac=0
Deleted [Startup_urls] : hxxp://search.conduit.com/?ctid=CT3309350&SearchSource=48&CUI=UN20440295672700716&UM=2
Deleted [Startup_urls] : hxxp://isearch.babylon.com/?babsrc=HP_ss_wls_btis2&mntrId=7C4EC446193FB247&affID=119357&tt=280813_dt&tsp=4992
Deleted [Startup_urls] : hxxp://search.conduit.com/?gd=&ctid=CT3324468&octid=EB_ORIGINAL_CTID&ISID=M2FC04980-5E38-4E5F-B563-D692E487B262&SearchSource=55&CUI=&UM=5&UP=SP1601971A-7E07-499D-8E05-81DFB3FF15A3&SSPV=
Deleted [Extension] : amfclgbdpgndipgoegfpkkgobahigbcl
Deleted [Extension] : dmgpbjjcdccinnndjdgmegndbmhbgglb
Deleted [Extension] : iigplimlmgilpobjilfbfeilnpiigpgl
Deleted [Extension] : licjnkifamhpbaefhdpacpmihicfbomb
Deleted [Extension] : majjphhgppkndjjkmhhnbgafooenebhd
Deleted [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof
Deleted [Extension] : ngaeinfoeljecnggcbonnohnjpepenmb
Deleted [Extension] : pcfopijhanoceijcfpaileppfklbeggk

*************************

AdwCleaner[R0].txt - [73886 octets] - [19/08/2014 17:18:39]
AdwCleaner[R1].txt - [73947 octets] - [19/08/2014 17:22:10]
AdwCleaner[S0].txt - [75893 octets] - [19/08/2014 17:23:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [75954 octets] ##########

 

C:\Users\All Users\InstallMate\{B3EF368E-3070-435B-A1B0-7852680C1478}\Custom.dll Win32/InstalleRex.M potentially unwanted application 
C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll a variant of Win32/Toolbar.Linkury.G potentially unwanted application 
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-abb-fix[1] a variant of Win32/Distromatic.C potentially unwanted application 
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\update[1] a variant of Win32/Toolbar.Perion.G potentially unwanted application 
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-abb-fix[1] a variant of Win32/Distromatic.C potentially unwanted application 
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\update[1] a variant of Win32/Toolbar.Perion.G potentially unwanted application 
C:\Windows\Temp\nsf8B9C.tmp\Helper.dll a variant of Win32/Toolbar.SearchSuite.P potentially unwanted application 
C:\Users\Terry\AppData\Local\Temp\nsy790D.tmp\Helper.dll a variant of Win32/Toolbar.SearchSuite.P potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF10.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF11.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF12.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF13.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF14.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF15.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF16.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF17.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF18.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF19.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF2.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF20.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF21.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF22.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF23.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF24.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF25.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF26.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF27.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF28.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF4.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF5.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF6.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF7.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF8.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2ptxnp8z.default-1387217905632\extensions\{1AE2033C-C518-0D7C-E250-6ABAA6D9F67D}\components\DatamngrHlpFF9.dll probably a variant of Win32/Toolbar.SearchSuite.Q potentially unwanted application deleted - quarantined
C:\Users\Terry\Downloads\captaincooks(1).exe a variant of Win32/PrimeCasino potentially unwanted application deleted - quarantined
C:\Users\Terry\Downloads\captaincooks.exe a variant of Win32/PrimeCasino potentially unwanted application deleted - quarantined
C:\Users\Terry\Downloads\jZipSetup-r20-n-bf.exe probably a variant of Win32/Toolbar.SearchSuite.J potentially unwanted application deleted - quarantined
C:\Users\Terry\Downloads\reginout_setup_cb(1).exe multiple threats cleaned by deleting - quarantined
C:\Users\Terry\Downloads\reginout_setup_cb.exe multiple threats cleaned by deleting - quarantined
C:\Users\Terry\Downloads\ukcasinoclub.exe a variant of Win32/PrimeCasino potentially unwanted application deleted - quarantined
C:\Users\Terry\Downloads\WinZip175.exe a variant of Win32/OpenInstall potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files\~Web Assistant\Extension32.dll.vir a variant of Win32/Toolbar.Perion.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files\~Web Assistant\Extension64.dll.vir a variant of Win64/Toolbar.Perion.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files\~Web Assistant\InstallerHelper.dll.vir a variant of Win32/Toolbar.BitCocktail.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files\~Web Assistant\Firefox\chrome\content\main.js.vir Win32/Toolbar.Perion.D potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\CT3309350\plugins\TBVerifier.dll.vir Win32/Toolbar.Conduit.AC potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\jZip\Helper.dll.vir a variant of Win32/Toolbar.SearchSuite.P potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\jZip\Uninstall.exe.vir probably a variant of Win32/Toolbar.SearchSuite.J potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\browser\nsprotector.js.vir Win32/Conduit.SearchProtect.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\ProgramData\Bcool\uninstall.exe.vir Win32/Adware.MultiPlug.A application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\AnyProtectScannerSetup.exe.vir Win32/AnyProtect.D potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.31.4.510_0\APISupport\APISupport.dll.vir a variant of Win32/Conduit.SearchProtect.P potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.31.4.510_0\nativeMessaging\TBMessagingHost.exe.vir a variant of Win32/Toolbar.Conduit.AH potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.31.4.510_0\plugins\ChromeApiPlugin.dll.vir a variant of Win32/Conduit.SearchProtect.N potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcfopijhanoceijcfpaileppfklbeggk\1.26.34_0\extensionData\plugins\91_monetizationLoader.js.js.vir JS/Toolbar.Crossrider.B potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir a variant of Win32/Mobogenie.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir a variant of Win32/Mobogenie.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir a variant of Win32/Mobogenie.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Cache\f_00002f.vir JS/Toolbar.Crossrider.B potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Cache\f_000032.vir JS/Toolbar.Crossrider.B potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.16_0\extensionData\plugins\91.js.vir JS/Toolbar.Crossrider.B potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.26.0.540_0\APISupport\APISupport.dll.vir a variant of Win32/Conduit.SearchProtect.N potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.26.0.540_0\nativeMessaging\TBMessagingHost.exe.vir Win32/Toolbar.Conduit.AH potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.31.4.510_0\APISupport\APISupport.dll.vir a variant of Win32/Conduit.SearchProtect.P potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.31.4.510_0\nativeMessaging\TBMessagingHost.exe.vir a variant of Win32/Toolbar.Conduit.AH potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Extensions\iigplimlmgilpobjilfbfeilnpiigpgl\10.31.4.510_0\plugins\ChromeApiPlugin.dll.vir a variant of Win32/Conduit.SearchProtect.N potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Local\torch\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd\1.26.20_0\extensionData\plugins\91.js.vir JS/Toolbar.Crossrider.B potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Terry\AppData\Roaming\Mozilla\Firefox\Profiles\2dxry03k.default\Extensions\{650598e1-b35a-45d3-b607-896d7acb64c3}\Plugins\npConduitFirefoxPlugin.dll.vir a variant of Win32/Conduit.SearchProtect.N potentially unwanted application deleted - quarantined
C:\ProgramData\InstallMate\{B3EF368E-3070-435B-A1B0-7852680C1478}\Custom.dll Win32/InstalleRex.M potentially unwanted application deleted - quarantined
 

 



#4 buddy215

buddy215

  • Moderator
  • 13,305 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:32 PM

Posted 20 August 2014 - 06:23 AM

Those programs didn't get rid of the AdChoices crapware but they certainly removed a ton of other crapware!

 

I was not sure if those programs were now able to remove AdChoices or not. I did find other members' logs here

that required the use of special tools not allowed to be used in this forum to remove the AdChoices crapware.

 

I suggest you post these logs and a DDS log in the forum linked below. Once you have posted the logs do not

bump your topic until someone has responded to your topic. I am not sure how long that will be. Could be days.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help - Virus, Trojan, Spyware, and Malware Removal Logs

Virus, Trojan, Spyware, and Malware Removal Logs Forum - BleepingComputer.com


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 Terwyl

Terwyl
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:32 PM

Posted 20 August 2014 - 06:42 AM

Thanks buddy215. Excuse my ignorance what is a DDS log and how do I acquire it? 

 

Regards

 

Terry



#6 buddy215

buddy215

  • Moderator
  • 13,305 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:32 PM

Posted 20 August 2014 - 07:24 AM

Scroll down to instruction #6 in the Preparation Guide link I provided in my previous post.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,743 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:32 PM

Posted 20 August 2014 - 09:10 AM


Your log(s) is posted here.

Now that your log is posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Response Team member...nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show in the log(s) you already posted. Further, any modifications you make on your own may cause confusion for the member assisting you and could complicate the malware removal process or make things worst which would extend the time it takes to clean your computer.

From this point on the Malware Response Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take several days to get a response because the Malware Response Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have posted your log and are waiting, please DO NOT "bump" your post or make another reply until it has been responded to by a member of the Malware Response Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another Malware Response Team member is already assisting you and not open the thread to respond.

If HelpBot replies to your topic, please follow Step One and CLICK the link so it will report your topic to the team members.

To avoid confusion, I am closing this topic.

Good luck with your log.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users